51 matches found
mc-log4j-patcher
mc-log4j-patcher Sostituisce la vecchia versione di Log4j2 vulnerabile - CVE-2021-44228 con l'ultima 2.15.0 che contiene il fix per la RCE JNDI. Testato su Spigot 1.12.2, PaperSpigot 1.8.8, PaperSpigot 1.17.1 Questo strumento è pensato per correggere server attualmente non supportati, come...
MC-Log4j-Patcher
MC-Log4J-Patcher Das Ziel dieses Projekts ist es, Minecraft-Spielern und Serverbetreibern in Bezug auf den kürzlich entdeckten Log4J-Exploit CVE-2021-44228 ein beruhigendes Gefühl zu geben. Derzeit sucht dieses Projekt nach beliebigen Log4J-Formatzeichenfolgen, nicht nur nach jndi, und ersetzt si...
cve-2018-6389-php-patcher
cve-2018-6389-php-patcher Correggi la vulnerabilità DOS di Wordpress CVE-2018-6389 in PHP. 1. Posiziona patcher.php nella directory root di WordPress 2. Richiedi yourwordpress.com/patcher.php 3. Elimina patcher.php Fonte : https://www.securemydata.fr/patch-de-la-faille-cve-2018-6389-dos-wordpress...
CVE-2025-66478-github-patcher
المُصحِّح الآلي لـ Next.js CVE أداة أتمتة مكتوبة بلغة Go لفحص مستودعات GitHub، واكتشاف إصدارات Next.js الضعيفة CVE-2025-66478، وإنشاء طلبات السحب Pull Requests تلقائيًا مع التصحيح الأمني المحدد. 📋 المتطلبات الأساسية تأكد من تثبيت وتهيئة ما يلي في بيئتك: 1. Go الإصدار 1.20 أو أحدث 2. Git مع مفاتيح...
Py-RDP-Patcher
Py-RDP-Patcher Py-RDP-Patcher è uno strumento realizzato in Python per effettuare il patching del file termsrv e consentire sessioni RDP simultanee. Guida all'installazione: Questo script richiede solo la libreria art, che viene installata eseguendo: root@kitploit: pip install art Requisiti:...
CVE-2022-30190-NSIS
MSDT Patcher, noto anche come CVE-2022-30190-NSIS Questo è uno script NSIS che aiuta a distribuire e annullare la patch di mitigazione del registro per CVE-2022-30190 come raccomandato da Microsoft. Scarica l'eseguibile qui. Come funziona? Quando viene eseguito, controlla la presenza della chiave...
PrintNightmare-Patcher
Einführung PrintNightmare-Patcher, ein einfaches Tool, das die PrintNightmare-Sicherheitslücke behebt, die im Druckwarteschlangen-Dienst von Windows-Systemen auftritt CVE-2021-34527. Zusätzlich prüft es, ob Ihr System das entsprechende Sicherheitsupdate installiert hat oder nicht. Installation...
openqore
openqore Ein Open-Source-Toolkit zum Patchen, Modifizieren und Verbessern der Firmware von soundcore-Q-Series-Kopfhörern, mit geplanter Unterstützung für weitere Modelle. Hinweis: Dieses Projekt ist meine persönliche Reise in die Welt des Hardware-Reverse-Engineering und der eingebetteten Systeme...
CVE-2026-43920
FOSSBilling is a free, open-source billing and client management system. In versions 0.5.4 through 0.7.2, the /run-patcher maintenance endpoint in FOSSBilling was accessible without authentication, which allowed unauthenticated remote users to trigger update patch routines that modify configurati...
CVE-2026-43920
CVE-2026-43920 affects FOSSBilling versions 0.5.4–0.7.2 where the unauthenticated /run-patcher endpoint allowed privileged maintenance operations (config migrations, DB schema changes including ALTER/DROP/UPDATE, filesystem deletions/renames, and cache clearing) to be executed without admin auth,...
CVE-2026-43920 FOSSBilling: Unauthenticated update patcher endpoint allows remote maintenance execution
FOSSBilling is a free, open-source billing and client management system. In versions 0.5.4 through 0.7.2, the /run-patcher maintenance endpoint in FOSSBilling was accessible without authentication, which allowed unauthenticated remote users to trigger update patch routines that modify configurati...
CVE-2026-43920
FOSSBilling is a free, open-source billing and client management system. In versions 0.5.4 through 0.7.2, the /run-patcher maintenance endpoint in FOSSBilling was accessible without authentication, which allowed unauthenticated remote users to trigger update patch routines that modify configurati...
CVE-2026-43920 FOSSBilling: Unauthenticated update patcher endpoint allows remote maintenance execution
FOSSBilling is a free, open-source billing and client management system. In versions 0.5.4 through 0.7.2, the /run-patcher maintenance endpoint in FOSSBilling was accessible without authentication, which allowed unauthenticated remote users to trigger update patch routines that modify configurati...
ContraFix: Agentic Vulnerability Repair Via Differential Runtime Evidence and Skill Reuse
Large language model LLM agents are increasingly used for automated vulnerability repair AVR, where repository-level reasoning enables them to inspect context and produce source-code patches. However, recent empirical results show that these agents still struggle with real-world vulnerabilities...
App Auto-Patch 安全漏洞
App Auto-Patch is an open-source tool developed by App Auto-Patch for automating the patching of Mac applications. Version 3.4.2 of App Auto-Patch contains a security vulnerability, which stems from insecure permissions, potentially allowing attackers to write arbitrary files...
Exploit for Deserialization of Untrusted Data in Facebook React
Next.js RCE Patcher CVE-2025-55182 A simple, automated tool...
CVE-2025-63917
PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity XXE references. The application uses .NET's XmlDocument class without disabling external entity resolution, enabling attackers to: Read arbitrary files from the victim's filesystem,...
CVE-2025-63917
PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity XXE references. The application uses .NET's XmlDocument class without disabling external entity resolution, enabling attackers to: Read arbitrary files from the victim's filesystem,...